621b16d9d08c75c61b54bbe41a23603d0f3ec1edaad98e8e605ccb63ba3f5cdc

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 03:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_621b16d9d08c75c61b54bbe41a23603d0f3ec1edaad98e8e605ccb63ba3f5cdc.html
Size 112KB
Sample260913-efjs5atshw
SHA256 621b16d9d08c75c61b54bbe41a23603d0f3ec1edaad98e8e605ccb63ba3f5cdc
MD5 dd0e47a59ae0c0ef1d73dbee16616b61
SHA1 485915f044baf389e8c40f380ad32970c923cabc
SHA512 9856820f944370f46ae1d70e151e456ebbdcb6023b47e54e321b8ace729e47f514790f086eee4162b2ffbf262683436e8144946d9cfaace63e76a237230db7e3
SSDEEP 1536:oPxcYn+hliWRYGgYdqQJNP2jSYe2Q4TtSNoXxBu9AbEaoBbEaosJ+txLAF:Wq2QlNc4AdoBdosJuLAF
TLSH
T179B3C68711205CFAEFA54DB3459B186B3D2C1437AC4390B9E3FD8F972B52D6E034A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2628	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337451816577640"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{A6396A79-D465-403A-B8CE-E7A6D2AF50E6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4968 wrote to memory of 2420	4968	msedge.exe	88
PID 4968 wrote to memory of 4660	4968	msedge.exe	89
PID 4968 wrote to memory of 2628	4968	msedge.exe	90
PID 4968 wrote to memory of 4660	4968	msedge.exe	89
PID 4968 wrote to memory of 4660	4968	msedge.exe	89
PID 4968 wrote to memory of 2340	4968	msedge.exe	92
PID 4968 wrote to memory of 2340	4968	msedge.exe	92
PID 4968 wrote to memory of 2112	4968	msedge.exe	93
PID 4968 wrote to memory of 2112	4968	msedge.exe	93
PID 4968 wrote to memory of 952	4968	msedge.exe	94
PID 4968 wrote to memory of 2112	4968	msedge.exe	93
PID 4968 wrote to memory of 952	4968	msedge.exe	94
PID 4968 wrote to memory of 952	4968	msedge.exe	94
PID 4968 wrote to memory of 4520	4968	msedge.exe	95
PID 4968 wrote to memory of 4408	4968	msedge.exe	96
PID 4968 wrote to memory of 4520	4968	msedge.exe	95
PID 4968 wrote to memory of 4520	4968	msedge.exe	95
PID 4968 wrote to memory of 4408	4968	msedge.exe	96
PID 4968 wrote to memory of 4408	4968	msedge.exe	96
PID 4968 wrote to memory of 3308	4968	msedge.exe	98
PID 4968 wrote to memory of 3308	4968	msedge.exe	98
PID 4968 wrote to memory of 3688	4968	msedge.exe	99
PID 4968 wrote to memory of 3688	4968	msedge.exe	99
PID 4968 wrote to memory of 820	4968	msedge.exe	101
PID 4968 wrote to memory of 5964	4968	msedge.exe	105
PID 4968 wrote to memory of 4676	4968	msedge.exe	106
PID 4968 wrote to memory of 2852	4968	msedge.exe	107
PID 4968 wrote to memory of 4092	4968	msedge.exe	108
PID 4968 wrote to memory of 4092	4968	msedge.exe	108
PID 4968 wrote to memory of 4308	4968	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_621b16d9d08c75c61b54bbe41a23603d0f3ec1edaad98e8e605ccb63ba3f5cdc.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7fff6e92c188,0x7fff6e92c194,0x7fff6e92c1a0
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,2057131307369073617,9186248661749297905,262144 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,2852527816031296940,5820502130885686827,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,1326643186078136739,6549170018282192214,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:13
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,16825160750777182132,5968136239805571336,2097152 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,11118771615461484385,1270784443561083989,2097152 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,16467965006657381893,10007646760444652853,2097152 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,4172599869834043060,5414892658415058302,2097152 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:9
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,1815821218034292730,5317757938830636788,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,1175332635468344196,6201840526667833232,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,9321529363501020542,6227622503498427082,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,9321529363501020542,6227622503498427082,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,9873405174854288616,6721589506597513977,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,4781528000739833512,8934868009863809227,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,15473491068150071108,1907666817967811693,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,1051166820045250666,2503446473606891714,524288 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6280,i,7945993273189478416,9687567160265036185,262144 --field-trial-handle=2340,i,15950587090785627385,11719721414632271744,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d59ed5f44d72bfcb29e3b00681a53f557123b1fd3e09755aeaae26c6ce259908
MD5 5adf1fa4a1b366dda716d7ee8d699376
SHA1 694e1e5a9e8bd8d5c93b88b205ba22a8ecec0ccb
SHA512 ad834fdcb626f355e3316fe370eea0e6562619cb6bf6d982a1bef22ca82654e2cee3ffa2e976633c7c6218b82cab8127658e64be0e5b7a10f5d105ebfbae0bc1
TLSH
T17061EB8142DFC15AF7B805B486D29C873E7C8591B683BFBBA495FB7856023D9B0450B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bc80.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bc80.TMP
Size 3KB
SHA256 5b6297f8e98c30cf93d6fd9c881edbac81f6175ddc5d0479d022199237d7a06e
MD5 49cb75a59612fb9d2ad45f67d5957275
SHA1 8fa3d2efbf9e41ede570431daeafeee6077ddb3e
SHA512 2b15a756d63ff66c3430a95caad086706c09fb688e4847a99b5957bded44727f836f193b76fb6bdc138612d684c3e5e45cf0204d12b2b8e8d772156d751a8d27
TLSH
T15261FC8142DFC149F7B805B086D1DC8B3E7C8691B683FFABA495FB7856023D9B0450B8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b43f4de78f15ef569954d44c15dc44ce36ef9f219f8f11864d6fe2e7edc276a3
MD5 5308a35589c16f0a2fce100e28f9ff15
SHA1 9c203568af6fdd2ebb0ab7099cca2934a9e1bc69
SHA512 e5780a0631c71ccf7e9f3fcb8abe75880caba701d23b618e94eb6cec64532f7038161bbd0994048bad467689f2a76ba361b24ad7b44aff40662ecd75e831b9d5
TLSH
T19B519EF7C3E4867E890156F4AB286E1ACE1D0919532C3C56C9E4AE1F53E24F1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5f055d346c81fd5a95dbd371d352461b7bacf0401f593162172ae60743d55abe
MD5 194f4cad87e4597bf9ae0186caeb9d2e
SHA1 806487b41c20d878dcdbfb3cf70ecd9c826a4940
SHA512 5b9343a724aa9a2e22d97768938d0fda5e9cc0a28e682c7a0227469fb1616a35ea076b2974048ff9913dec30a5f5a358a16acaca1f21acbdb3777856aa0f3db2
SSDEEP 192:sxRuR4bE/fNs3f3zoA8p4i/g6+WNIYo8UoGT0IgDKJ:sxRuQE/fNsve3/5IYK46
TLSH
T18A32A815AE68A93B8CCBD21DFB55BF53E2F95032A0D51F48A6FC861C04EB6DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cfce76a8be14c2e04775d5cb9602f616a21e81e241248ee11c63d237380dec39
MD5 30896cc1e9b1a4d9c626dd19c07215da
SHA1 93846bba954244162832324dbfaddaeb1c5d0d90
SHA512 be4c76dbd8bb2882290f2eb99d368c7313ad0f9f9247c771a816011f97ea9e84d3d0be8d2ec5dc87432356c2b41abd9c3c2502ac11cd5a12bb7979408bf2e68e
SSDEEP 192:sxRuR4bE/fNsy3zoA8p4i/g6+WNIYojoGT0IgD4J:sxRuQE/fNsye3/5Iv4w
TLSH
T12B32A715AE68A93B8CCBD21DFB55BF53E2F95032A0951F48A6FC861C04EB6DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fe1cea093a8e92e4b9638b4d62eced3963e7d4864036bba1ff5031c72daa1c86
MD5 669315412a062f02be91286dc63da462
SHA1 ca1a2c91717e7e7697140301ebaf11aa03c7bbeb
SHA512 53c03ab47004c136dc62944df2f399079969a4712813a9cc5ecfb8a1e266f60228b5c37391a7419e6e698e50ec5d5fa4c0cae686635d2a963bee7c80909376fb
SSDEEP 192:sxRJR4bE/fNsg3zoA8p4i/g6+WNIYojoGT0IgIJ:sxRJQE/fNsge3/5Iv4s
TLSH
T1552296156E68A93B8CCBD21DFB65BF53E2F95032A0951E48A6FC861C04EB6DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 18e9eaaedd0e9f6bbbd75d71d610f29119378e757e19b76fae4b8c12a7e1851a
MD5 a406d07cffa01578dc8e57bcdd0c3f2f
SHA1 97a7cdb4d9c14f2d7f62056ffdfa3bbf6de08904
SHA512 5affd3f32cc761e39bd7446de81795fb23a1451678fce2cb46ada76bf9b1f70e9cbbb03cf448be9a7d99d8846e3f0ea3449bcf8ea1f3b82051b3893ba1cb9fb6
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUtrondn:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0V6
TLSH
T197B2DA2B744CCB7F4FC04AAD9C196FDB6D9802C796588D8047FAD94C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8cae59c139a223288d1254f23c86ce5ba64f794a550ac5514433b46d904377bd
MD5 e2fe3cfc3bcdbe6c858f293c155b2947
SHA1 86636a91d0aa1cb6afa645bb5b86bab2566c41a3
SHA512 df5a6dcbf6fbfb1f32a68a6f7f2e4c3a55dc80e7208ee61c3b99697ec0c911bda9460c484b790b20d39148a37d9d3f8ccc606cd195d089e8f41e2c1f988823d9
SSDEEP 48:Km4BOyQ22dLa/QIEKdKdc1wdx1mFiGgoY2Oon9IJG2KwTYc2sem3fMmnyB2IvKXv:KAxiKikEvmKUUiC2UKXK8b6KJ
TLSH
T1FB91CF26333F1206383E7509A79597AF534631A33464E52A37EA00A55D6BF084FFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

03c1e97e-9452-4cc7-997e-c9f59c58409c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\03c1e97e-9452-4cc7-997e-c9f59c58409c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 17fb4c0506ff39a36449d2a7f87eb9eb4cb9a3c25db8cef7bf2ced548a9281dc
MD5 394352993bf2ae7e039967e03bcfa330
SHA1 ffd36bc38ac9944552f0241f0ca9ce7af4d004ec
SHA512 70da244623ca10569e9e385a42d7845d0674ff7a5996f658e0047d491415e12d2b3578cb915dae87dc2743c1c9b96a9e3fdfa00710a0a440a39a9da311b71932
SSDEEP 768:EFQ734wgAo5OkBPt+Py/9OA9at01j0iq00+IaiKcTRTl:n73nDCHq00Na5cTRTl
TLSH
T1C403AF729CA4CA77ADF6E785B60A33529FF04153C6CAD980D6DD6E0D004B5DD130BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 12a23379ef5583044f4b90dd6744e894625106afb278c61bda2cdda4aef4c136
MD5 6c127e4e94874a22dbefecc8db35c6e4
SHA1 908a86c94268aac4a6376eebfc433a0f2c9293ca
SHA512 c611ab888ce059c551ce360106408c4c1bee8c578adaa8e63c8d876b160e6041c4c7b6db4ef89b97bc059e66518397d742cb8f872d4dc76c8cb9dfa93aa224b8
SSDEEP 768:t/UxvxjgC+P3tX5OkBPt+PQ/9OA9at01j0iq00+IaiKomL:QZj3+P3tmCHq00Na5omL
TLSH
T1E303BF32ECA55D33ACE2F294730A2393AFF45523C6C969904AED1E0E054B6EE1707C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d492cb3d81192039ba3dba0fdc18131291029ce7284f92d24e9e173d93ddceb6
MD5 7f1f51c929c9076dad4ac314302875ef
SHA1 3bd6f309eb82dd152590f64a370bfd1b54fc4644
SHA512 4015e092ac56df650162e9c7fe9e851ff506addf505d76a8ec207ea63dfb95f7a5acd9f3b8d3f5384b476ff1c4b840a3b6e543efce6481b9967d2c8f184879ff
SSDEEP 768:Bi3Wo5OkBPt+Pm/9OA9at01j0iq00+IaiKcTRTl:Bi3WvCHq00Na5cTRTl
TLSH
T1DCF2AF71ACB48D77ADE6E28576063352AFF45113C7CD9A8089ED2B0E044BADA170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c861abedaa20bad8edbb0dcbc04acf3adaf32a3f9619e105feaba89cfc39c8b0
MD5 fd885b6756c870421cfc089fb6f93870
SHA1 c5a54b64d5dabf3b9d32d759911c700d348ea393
SHA512 2dd60ba1c07c5b2b720f0327c2e2ff87810bc111293b8db5c3a918db68c7737811cfb1039a37c0d997d402980d8e83affb9e5a6dd05d3d38e9972311a3a636f8
SSDEEP 768:X/UxvxjgC+H32CBOkBPt9/9OA9at01j0iq00+Ia29SHxRz:KZj3+H32VCHq00NaiSTz
TLSH
T1BD03CF31ECA09D779CF2B384730963979FF45663D6C96A904AED2A0E01476AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7257857d-f9e6-496c-8954-606eae9c8a07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7257857d-f9e6-496c-8954-606eae9c8a07.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download